Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
File: 9rA2a7rqx7WITkJt-ACewnosYC4.mft (raw, json)
Hash identifier: IH5Jr+Yxt2pyM5Tj59PyNCC32BHiYQBezLgUyyl6R2U=
Subject key identifier: 75:AB:08:0A:B2:96:01:72:7A:14:30:D2:44:AD:73:04:E4:96:7A:2B
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 0194BCE0B42B902EE948C93C85E173CB9F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
Manifest number: 0320
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 9rA2a7rqx7WITkJt-ACewnosYC4.crl (hash: nFPmJ3yOr4e6u/pDzreXpjr4S3fZEeCD3AznDocnY6A=)
2: izm1O4S-x2UDeNY6fo1YhqW7N8g.roa (hash: tl5IuNJmLiqZ3agDxn5CXFUtrHRHejemwivyEs6+MfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b4:2b:90:2e:e9:48:c9:3c:85:e1:73:cb:9f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=75ab080ab29601727a1430d244ad7304e4967a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:8f:eb:7a:5a:25:ae:9f:c3:28:72:e2:7d:
3e:db:53:37:98:69:a9:ab:0d:b0:ba:a8:43:3b:2b:
f5:d3:5c:13:50:9d:da:7c:7f:2b:7e:c3:b7:f8:7e:
09:8f:85:2a:a5:e9:a0:7e:b5:f6:db:3e:d2:40:f7:
ac:b0:28:ce:f8:c1:b9:40:1d:a0:41:72:38:52:b2:
7a:91:b0:a0:92:f3:b3:b6:75:34:a7:4a:fb:10:93:
ba:89:6b:e1:7e:f8:24:66:35:db:bd:fa:4a:25:01:
f6:c8:73:1b:85:ce:9b:dd:b4:95:53:b4:83:ec:62:
a7:e4:ce:ba:2f:8a:43:ba:52:44:57:4d:46:14:8a:
2c:79:3e:11:99:89:4a:dd:91:f7:e4:68:1f:48:d6:
27:27:be:36:c1:95:34:65:14:7c:4f:fd:8f:53:c2:
c6:8c:a8:38:f6:52:5a:ff:50:e2:21:17:af:a0:ba:
62:35:17:8b:9a:64:72:18:4c:45:a9:41:34:2e:73:
de:23:f9:b7:c3:e1:ea:e4:57:fc:83:1d:fb:24:f3:
47:7e:33:6d:d6:41:fc:37:53:ea:d9:87:75:40:78:
33:35:55:69:92:0b:46:85:00:fa:6a:de:41:41:26:
12:14:15:d1:ac:8a:71:3d:1e:a8:55:a9:10:7b:93:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:08:0A:B2:96:01:72:7A:14:30:D2:44:AD:73:04:E4:96:7A:2B
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:0f:09:82:8e:86:85:27:5d:3b:36:57:53:c3:67:a8:0e:
81:e7:b8:4a:e4:45:47:01:33:dc:6e:86:51:92:b5:97:da:49:
4e:88:22:77:73:a2:02:31:3b:56:31:02:09:c9:03:1e:03:76:
4f:44:a4:e9:0b:03:b8:0f:de:3e:87:68:55:bb:23:ca:d0:71:
ca:e8:8b:45:48:d7:64:b0:60:ff:d2:7a:c2:48:50:15:22:76:
06:5d:62:c0:cc:e1:bf:a1:dd:95:bc:64:06:08:cd:4a:e3:16:
d8:34:aa:62:b8:e2:db:c7:7f:5f:94:6b:ac:32:db:c9:a1:90:
93:72:4e:1b:5d:b4:e2:12:54:50:4c:df:95:07:5d:3b:2f:bb:
3f:b2:a3:90:bc:3f:6b:74:c3:ab:99:19:64:c9:e3:c3:99:69:
82:ba:0e:8c:ee:92:c3:bf:8c:3e:27:ad:d8:6b:7b:28:0a:c5:
4b:de:4b:dd:fc:2d:72:68:42:34:8e:68:d0:64:53:e2:73:4b:
73:88:50:1d:19:4e:5f:7d:4a:15:d6:98:5b:31:44:7d:c0:bd:
17:c4:70:3a:95:07:b6:bf:b9:d1:38:49:98:c6:33:fb:d5:9e:
be:fe:0f:5d:07:da:a7:1b:1a:98:17:12:26:fb:f0:66:13:be:
03:8c:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:46 2025 by rpki-client